CVE-2022-45063

Katalog CVE

CVSS 9.8 · Critical EPSS 5,4%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada invisible-island xterm, fedoraproject fedora. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Rincian

Terbit di NVD

10 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

EPSS (30 hari)

5,4% peluang dieksploitasi; lebih tinggi dari 92,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://invisible-island.net/xterm/xterm.log.html release notes · advisory vendor
• http://www.openwall.com/lists/oss-security/2022/11/10/1 mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/11/10/5 mailing list · patch · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2022/11/10/1 mailing list · patch · advisory pihak ketiga
• https://news.ycombinator.com/item?id=33546415 exploit · issue tracking · advisory pihak ketiga
• https://security.gentoo.org/glsa/202211-09 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/06/15/1
• http://www.openwall.com/lists/oss-security/2024/06/17/1
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TPVNTYFFWNTG...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5T2JI5JCHPTXX...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IVD3I2ZFXGOY6...
• http://www.openwall.com/lists/oss-security/2026/04/08/1
• http://www.openwall.com/lists/oss-security/2026/04/08/10